What is harmony-hub-root?

Harmony Hub LAN Root SSH Tool is a script that unlocks full administrator access on a Logitech Harmony Hub smart remote you already own. The Harmony Hub is a small device that controls your TV, speakers, and other home entertainment equipment from one app. This tool gives you a permanent SSH connection to the hub, meaning you can log into it from a terminal on your computer and run commands directly on the device. The tool only works when your computer and the hub are on the same local network, and the hub must have already been set up through the official Harmony phone app. It exploits a chain of security weaknesses in the hub firmware version 4.15.600. In plain terms: the hub has a local communication service that trusts older client software too much, and one of its internal log-writing functions does not properly restrict which folders it can write to. By combining those two issues, the tool is able to create a file on the hub that enables a hidden vendor debug mode, and then uses that mode to install a small SSH server called Dropbear onto the device. Once installed, Dropbear starts automatically every time the hub powers on, so you keep SSH access after unplugging and replugging the device. The tool creates a key on your computer the first time it runs, and that key is what you use to log in as root going forward. The README walks through each step of the exploit chain in detail, explaining what each vulnerability is and why it works. It is written for someone who owns the device and wants to understand exactly what the tool is doing to their hardware. To run it on Windows you double-click a launcher file and enter the hub IP address. On Linux or macOS you run a shell script with the IP address as an argument. The project requires Python 3.10 or newer and standard SSH tools.